An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 7.8 · e2fsprogs_project, redhat, fedoraprojectNVD modified 2026-10-14 13:17
Affected (CPE criteria) 5
cpe:2.3:a:e2fsprogs_project:e2fsprogs:1.46.5:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
References 6
- https://bugzilla.redhat.com/show_bug.cgi?id=2069726 Issue Tracking, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2069726 Issue Tracking, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/10/msg00001.html
- https://security.netapp.com/advisory/ntap-20241122-0010/
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cert-portal.siemens.com/productcert/html/ssa-419740.html